mirror of
https://github.com/LaCasemate/fab-manager.git
synced 2024-12-11 22:24:21 +01:00
7099f1f317
- Ability to set the address as a mandatory field - The address is new requested when creating an account - The profile completion page is less fuzzy for people landing on it without enabled SSO
95 lines
3.0 KiB
Ruby
95 lines
3.0 KiB
Ruby
# frozen_string_literal: true
|
|
|
|
# API Controller for resources of type AuthProvider
|
|
# AuthProvider are used to connect users through single-sign on systems
|
|
class API::AuthProvidersController < API::ApiController
|
|
|
|
before_action :set_provider, only: %i[show update destroy]
|
|
def index
|
|
@providers = policy_scope(AuthProvider)
|
|
end
|
|
|
|
def create
|
|
authorize AuthProvider
|
|
@provider = AuthProvider.new(provider_params)
|
|
if @provider.save
|
|
render :show, status: :created, location: @provider
|
|
else
|
|
render json: @provider.errors, status: :unprocessable_entity
|
|
end
|
|
end
|
|
|
|
def update
|
|
authorize AuthProvider
|
|
if @provider.update(provider_params)
|
|
render :show, status: :ok, location: @provider
|
|
else
|
|
render json: @provider.errors, status: :unprocessable_entity
|
|
end
|
|
end
|
|
|
|
def show
|
|
authorize AuthProvider
|
|
end
|
|
|
|
def destroy
|
|
authorize AuthProvider
|
|
if @provider.safe_destroy
|
|
head :no_content
|
|
else
|
|
render json: @provider.errors, status: :unprocessable_entity
|
|
end
|
|
end
|
|
|
|
def mapping_fields
|
|
authorize AuthProvider
|
|
render :mapping_fields, status: :ok
|
|
end
|
|
|
|
def active
|
|
authorize AuthProvider
|
|
@provider = AuthProvider.active
|
|
@previous = AuthProvider.previous
|
|
end
|
|
|
|
|
|
def send_code
|
|
authorize AuthProvider
|
|
user = User.find_by(email: params[:email])
|
|
|
|
if user&.auth_token
|
|
if AuthProvider.active.providable_type != DatabaseProvider.name
|
|
NotificationCenter.call type: 'notify_user_auth_migration',
|
|
receiver: user,
|
|
attached_object: user
|
|
render json: { status: 'processing' }, status: :ok
|
|
else
|
|
render json: { status: 'error', error: I18n.t('members.current_authentication_method_no_code') }, status: :bad_request
|
|
end
|
|
else
|
|
render json: { status: 'error', error: I18n.t('members.requested_account_does_not_exists') }, status: :bad_request
|
|
end
|
|
end
|
|
|
|
private
|
|
|
|
def set_provider
|
|
@provider = AuthProvider.find(params[:id])
|
|
end
|
|
|
|
def provider_params
|
|
if params['auth_provider']['providable_type'] == DatabaseProvider.name
|
|
params.require(:auth_provider).permit(:name, :providable_type)
|
|
elsif params['auth_provider']['providable_type'] == OAuth2Provider.name
|
|
params.require(:auth_provider)
|
|
.permit(:name, :providable_type,
|
|
providable_attributes: [:id, :base_url, :token_endpoint, :authorization_endpoint, :logout_endpoint,
|
|
:profile_url, :client_id, :client_secret,
|
|
o_auth2_mappings_attributes: [:id, :local_model, :local_field, :api_field,
|
|
:api_endpoint, :api_data_type, :_destroy,
|
|
transformation: [:type, :format, :true_value,
|
|
:false_value, mapping: %i[from to]]]])
|
|
end
|
|
end
|
|
end
|